Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa
File:                     QNnqPmAg6QZuDud0B7TXI_ja-mk.roa (raw, json)
Hash identifier:          LZ+fqgaZdwBFs2hpoT8qSg2ib5RGmQ4rYT7Voh+a+V4=
Subject key identifier:   40:D9:EA:3E:60:20:E9:06:6E:0E:E7:74:07:B4:D7:23:F8:DA:FA:69
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       018499393D8CAFEC36B97AFA2F01D2A2BE53
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa
Signing time:             Mon 21 Nov 2022 08:06:16 +0000
ROA not before:           Mon 21 Nov 2022 08:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204854
IP address blocks:        185.237.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:39:3d:8c:af:ec:36:b9:7a:fa:2f:01:d2:a2:be:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Nov 21 08:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40d9ea3e6020e9066e0ee77407b4d723f8dafa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:2f:b4:09:af:75:f3:56:af:8d:85:d5:29:
                    a4:98:0d:d5:8e:47:c7:57:66:df:97:c9:30:13:f4:
                    bb:93:05:26:6a:d6:f8:e1:48:a8:cd:6f:45:27:8e:
                    71:dd:af:59:63:78:e8:04:9c:e1:ce:9c:3e:c2:78:
                    ca:16:81:dc:27:6a:da:2c:6a:af:a6:1b:60:48:d3:
                    79:37:03:08:e1:c7:41:58:c8:33:be:0d:55:c2:61:
                    a4:ce:92:d7:82:fc:6f:0b:16:b5:6b:d6:bf:30:47:
                    75:3e:96:fc:a7:0a:a9:3a:cd:fe:be:74:2e:b4:1e:
                    3a:62:0f:b0:a2:65:fe:d2:97:7e:18:6c:25:8e:18:
                    92:de:51:3d:b4:7f:d3:0c:06:5b:48:91:a8:46:ff:
                    b5:08:2b:86:31:56:25:8f:69:af:00:1c:9c:89:62:
                    22:0b:06:5e:19:36:1c:2f:05:db:bb:02:71:b7:b3:
                    c6:51:2f:27:fa:e1:46:3a:3c:5a:15:c8:58:f3:40:
                    30:21:66:d6:3a:db:74:63:56:25:2a:cf:be:3e:0d:
                    37:44:b3:ce:d1:bb:62:b5:07:4d:2c:c2:8f:06:06:
                    df:5e:30:eb:0f:2f:22:9a:8f:2b:01:51:d6:77:73:
                    f6:62:b0:5f:34:31:70:0b:b8:13:5b:b7:1f:2f:62:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D9:EA:3E:60:20:E9:06:6E:0E:E7:74:07:B4:D7:23:F8:DA:FA:69
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/QNnqPmAg6QZuDud0B7TXI_ja-mk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.237.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:71:1f:62:90:b4:93:3d:34:ca:73:ad:22:3f:d6:42:c2:
         95:53:c5:e6:e4:28:df:ec:6b:e7:6b:cc:58:81:33:a6:ad:df:
         12:fe:54:14:cc:79:62:d1:e9:22:1b:18:e7:6a:26:1b:15:ed:
         54:f7:58:91:e2:98:9e:7c:e9:e2:a9:d0:52:66:4a:d6:a0:8a:
         b7:34:24:2b:58:4d:a6:a7:ce:1d:58:d3:33:d3:6d:5e:a8:e7:
         db:f1:7f:90:c4:a6:77:fc:68:4d:ed:1a:c9:93:5b:cf:74:6b:
         0b:d6:e0:11:2b:2d:3c:7f:00:10:f5:9e:26:62:9f:ba:8d:4e:
         e6:70:bd:65:4a:9c:e9:57:1d:5c:29:d9:f2:55:44:96:99:1c:
         c1:61:8c:75:38:e5:d8:7f:03:a8:5c:59:ae:37:58:9c:ca:bb:
         04:2c:cb:80:d7:07:c4:9e:e0:db:e0:c1:64:64:22:3b:9c:56:
         08:2f:8c:20:47:e7:ce:78:6d:29:58:98:36:87:b3:c3:25:04:
         aa:53:6e:a2:fe:d6:f6:9a:34:5d:e6:a6:fb:99:0c:ff:0d:ca:
         a2:2b:8c:df:3b:5d:a3:7b:f5:d7:eb:73:57:ac:55:78:93:4c:
         5f:b2:b3:f2:54:12:9e:54:02:15:80:8f:28:5a:a6:36:2d:35:
         70:60:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:09 2024 by rpki-client on console-fra.rpki-client.org